$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa File: 1043B2347BBD11EA8356C986C4F9AE02.roa (raw, json) Hash identifier: V+We9fLRZLY+ralfjX12qr45UkU/JTizPftTl9sascQ= Subject key identifier: 70:2E:5E:91:77:E5:57:23:82:09:78:5D:B3:9A:29:35:EF:25:2D:AC Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A0E Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa Signing time: Sun 04 May 2025 08:15:34 +0000 ROA not before: Sun 04 May 2025 08:15:34 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137580 IP address blocks: 103.114.24.0/24 maxlen: 24 103.114.25.0/24 maxlen: 24 103.114.26.0/24 maxlen: 24 103.114.27.0/24 maxlen: 24 2407:44c0::/32 maxlen: 32 2407:44c0::/40 maxlen: 40 2407:44c0:1::/48 maxlen: 48 2407:44c0:8000::/48 maxlen: 48 2407:44c0:8001::/48 maxlen: 48 2407:44c0:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: May 4 08:15:34 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=68172226-5163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:98:7b:a8:42:2a:d0:26:2f:8a:4b:46:59: c4:f1:6d:11:b3:2b:e8:f3:15:71:57:c9:a8:38:12: 41:6d:05:1b:d7:3e:74:5e:3d:4a:9f:ff:86:67:60: e4:c2:d6:a1:8e:39:5b:a4:41:99:52:d4:a1:f6:92: 0f:38:5f:23:7a:15:02:a6:81:c2:88:4f:ef:59:ab: 91:8c:64:e2:90:ac:05:fb:5c:4e:8f:51:eb:db:9c: 5e:88:7b:46:6a:f0:1e:f5:08:2b:dc:c6:1b:87:5e: d1:3b:2f:93:10:5e:83:d5:7b:92:74:43:63:37:e6: 9c:8a:3e:66:d4:e9:30:60:53:14:f0:8b:94:0e:11: 2f:c1:0b:04:63:ec:ec:64:54:45:42:a6:e2:2c:ba: 24:d6:45:66:84:b0:87:15:e6:0b:a5:f2:67:25:fa: bd:28:1b:3b:2a:84:f4:93:c0:e5:9f:06:b7:ed:86: a1:e0:e5:1e:2a:be:ae:27:c3:c2:24:4d:40:73:8f: 64:30:96:68:6d:d8:5a:b9:1a:b1:6b:64:30:b7:74: b1:f3:4f:1b:ce:07:93:23:6f:75:da:01:85:46:0b: 9f:6f:00:67:af:05:0e:30:16:01:19:d1:fb:44:0c: c0:da:1c:09:66:b3:30:79:3b:c4:5b:d1:ec:1f:26: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:5E:91:77:E5:57:23:82:09:78:5D:B3:9A:29:35:EF:25:2D:AC X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.24.0/22 IPv6: 2407:44c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:4c:f3:fd:6b:8e:e9:04:33:54:d7:b6:05:a0:b0:fa:7a:37: cc:a8:a2:19:22:e1:93:02:28:f3:b0:27:5e:e6:e3:2f:1a:c7: 3e:ef:b6:6c:73:ff:83:0d:47:3b:c1:db:d4:2b:6c:fc:81:24: 48:24:b4:05:2e:e9:00:a1:96:e6:93:70:05:23:3f:20:bd:6e: cd:5f:d6:5f:65:10:0e:69:e6:63:a3:c8:a5:a0:b0:f9:a4:2c: a1:a4:1c:c3:c0:29:2e:f0:1f:56:b2:a7:f2:0e:0a:03:de:47: 76:3b:4b:98:45:f4:38:36:17:f5:5f:c8:d6:fe:41:b3:0f:42: 0b:cb:b7:af:8a:d7:01:d2:ba:af:b8:d0:7c:9a:e1:44:b9:57: a4:a4:ba:2d:50:6d:b4:06:03:7f:fd:bf:f1:a8:e1:39:29:62: 2f:0a:b3:ce:8c:b3:01:9d:34:31:17:e5:8f:d5:71:59:e7:5f: 79:e4:bc:3a:b5:06:11:f6:70:fa:f5:61:30:27:8e:f0:8b:84: 7d:79:7e:2f:b3:20:f2:c6:5f:6f:41:18:5d:e9:f3:33:b3:a7: c2:c0:df:8c:f1:2b:d6:44:89:74:f0:eb:e1:41:8a:dd:df:64: 01:b6:24:a5:30:91:35:45:33:74:e6:2a:a6:14:a0:24:c3:d2: ba:84:42:f9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwNTA0MDgxNTM0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE3MjIyNi01MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mWYe6hCKtAmL4pLRlnE8W0Rsyvo8xVxV8moOBJBbQUb1z50Xj1Kn/+GZ2Dk wtahjjlbpEGZUtSh9pIPOF8jehUCpoHCiE/vWauRjGTikKwF+1xOj1Hr25xeiHtG avAe9Qgr3MYbh17ROy+TEF6D1XuSdENjN+acij5m1OkwYFMU8IuUDhEvwQsEY+zs ZFRFQqbiLLok1kVmhLCHFeYLpfJnJfq9KBs7KoT0k8Dlnwa37Yah4OUeKr6uJ8PC JE1Ac49kMJZobdhauRqxa2Qwt3Sx808bzgeTI2912gGFRgufbwBnrwUOMBYBGdH7 RAzA2hwJZrMweTvEW9HsHyYOxwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHAuXpF3 5Vcjggl4XbOaKTXvJS2sMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDNTEvNDc2QTdCRTA3QkJDMTFFQTk2M0YzNjg2QzRGOUFFMDIvMTA0M0IyMzQ3 QkJEMTFFQTgzNTZDOTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnchgwDQQCAAIwBwMFACQHRMAwDQYJKoZIhvcNAQELBQAD ggEBAFhM8/1rjukEM1TXtgWgsPp6N8yoohki4ZMCKPOwJ17m4y8axz7vtmxz/4MN RzvB29QrbPyBJEgktAUu6QChluaTcAUjPyC9bs1f1l9lEA5p5mOjyKWgsPmkLKGk HMPAKS7wH1ayp/IOCgPeR3Y7S5hF9Dg2F/VfyNb+QbMPQgvLt6+K1wHSuq+40Hya 4US5V6Skui1QbbQGA3/9v/Go4TkpYi8Ks86MswGdNDEX5Y/VcVnnX3nkvDq1BhH2 cPr1YTAnjvCLhH15fi+zIPLGX29BGF3p8zOzp8LA34zxK9ZEiXTw6+FBit3fZAG2 JKUwkTVFM3TmKqYUoCTD0rqEQvk= -----END CERTIFICATE-----Generated at Fri May 16 21:44:29 2025 by rpki-client